Cover Genius's XCover is a global embedded-insurance API with AI-driven item classification (BrightWrite/Geniebot) and the XClaim instant-payout API. We integrated it into the client's booking flow so they could offer protection at checkout without becoming a licensed insurer.
A mid-sized online travel agency in EMEA wanted to offer travel protection at checkout but had no appetite to become a licensed insurer across 27 jurisdictions. They needed compliant, dynamically-priced policies rendered at cart and a clean claims path for customers.
- Implementing XCover's composite auth — X-Api-Key, an RFC 7231 GMT Date header, and an HMAC-SHA256 request signature.
- Generating and rendering dynamic, jurisdiction-correct policy offers from the customer's cart in real time.
- Exposing an instant-claims experience that paid out approved claims without a manual back office.
We built the client's adapter layer on XCover: construct the canonical request, sign it with HMAC-SHA256, POST to the Offers API for cart-aware policies, confirm purchase with an idempotency key, persist the policy, and surface XClaim for instant claim payouts.
- An HMAC-SHA256 request-signing module producing the X-Api-Key + Date + Authorization: SIGNATURE scheme XCover requires.
- A checkout integration calling POST /partners/{code}/offers/ with the cart payload and confirming via /offers/{id}/confirm/ using an x-idempotency-key.
- A claims portal on the XClaim API (POST /v2/partners/{code}/claims) that surfaces the returned claim_reference and pays approved claims instantly.
A customized view of the system we shipped for this engagement — the components and how requests and data flow between them.
Before — manual bottleneck flow
Team scopes what it would take to become a licensed insurer across 27 markets.
A one-size policy is bolted on with no per-cart pricing or jurisdiction logic.
Claims are handled over email and bank transfer with long customer wait times.
After — automated optimized flow
The cart is HMAC-SHA256 signed and POSTed to the XCover Offers API.
AI-classified, jurisdiction-correct policy options render directly at checkout.
Approved claims pay out immediately and return a claim reference to the customer.
“We'd shelved embedded insurance twice over the licensing question. This let us offer it at checkout without becoming an insurer, and the request signing and idempotency were solid enough to get through our compliance review without rework.”
